feat(ckan): Don't enforce SSLMode

StatCan · Nov 4, 2024 · 9cb3d91 · 9cb3d91
1 parent 87a5180
commit 9cb3d91
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 2 deletions.
diff --git a/stable/ckan/Chart.yaml b/stable/ckan/Chart.yaml
@@ -1,7 +1,7 @@
 name: ckan
 apiVersion: v2
 type: application
-version: 0.0.30
+version: 0.0.31
 appVersion: 2.9.5
 description: CKAN Helm Chart for Kubernetes.
 keywords:

diff --git a/stable/ckan/conf/pgbouncer/pgbouncer.ini b/stable/ckan/conf/pgbouncer/pgbouncer.ini
@@ -7,7 +7,7 @@
 listen_addr = 0.0.0.0
 auth_file = /etc/pgbouncer/userlist.txt
 auth_type = trust
-server_tls_sslmode = verify-ca
+server_tls_sslmode = {{ .Values.pgbouncer.sslmode }}
 server_tls_ca_file = /etc/root.crt.pem
 # These are defaults and can be configured
 # please leave them as defaults if you are

diff --git a/stable/ckan/values.yaml b/stable/ckan/values.yaml
@@ -260,6 +260,8 @@ pgbouncer:
   image:
     repository: mcr.microsoft.com/azure-oss-db-tools/pgbouncer-sidecar
     tag: latest
+  sslmode: prefer
+
 # Specify an external database
 # Useful for managed offerings from your Cloud Provider
 external: